ASP.NET error message

Description
  • Application error or warning messages may expose sensitive information about an application's internal workings to an attacker.<br/><br/> Acunetix found an error message that may disclose sensitive information. By requesting a specially crafted URL, Acunetix generated an ASP.NET error message. The message contains a complete stack trace and Microsoft .NET Framework version.
Remediation
  • Adjust the application's <code>web.config</code> to enable custom errors for remote clients (refer to 'Detailed information' section).
References